Endpoint Protection

 View Only

  • 1.  Location check every 4 seconds

    Posted Jun 04, 2014 02:21 PM

    I have SEP 12.1.4100.4126 and want my clients to update from the SEPM when on the network and update from Symantec LiveUpdate server when not on the network. I have set up a second location "External" and clients switch to this location when they cannot contact the SEPM. My question is:

    The location will be checked every 4 seconds - that is the default

    What is best practice for this location check? To me every 4 seconds seems pretty extreme. Currently I have a small test group but this is going to be deployed to a few thousand endpoints and I don't want them hammering the SEPM every 4 seconds. Any advice or real world proven checkin times?



  • 2.  RE: Location check every 4 seconds
    Best Answer

    Posted Jun 04, 2014 02:38 PM

    I've always left it at default, especially with only two locations. Now if you have more locations (best practice is no more than 7) then you may want to adjust it.

    Now the other thing to note is when it does a location check, it checks against whatever conditions you set, it doesn't come back to the SEPM (unless you have management server connection as one of the conditions). So you would look more at client performance if it had to cycle thru multiple locations.

    Either way, I don't see an issue here. I've had 15k clients with multiple locations and have never adjusted this value...



  • 3.  RE: Location check every 4 seconds

    Trusted Advisor
    Posted Jun 04, 2014 02:47 PM

    Hello,

    4 seconds is the default check time. Good that is not changed.

    30 seconds is normal. 60 seconds is a little high.

    In most of environment, the connection switches normally within 30 seconds.

    You can manage the locations and network connection types client computers can use to connect to the internal network. To manage these, use the following location-specific settings in the Manage Locations dialog box.

     

    Field

    Description

    Locations

    Contains a list of locations that have been added for a group. You can:

    ·         Click Add to add more locations.

    ·         Click Delete to delete the selected location.

    ·         Click Move Up or Move Down to change the order of the locations. The client checks the locations in the list in order. It selects one that is valid for the client's location and that has a policy with the security settings appropriate for that location.

    Location name

    The name of new location.

    Description

    The description of the new location.

    Enable this location

    When this option is checked, it causes the location to be immediately enabled.

    Set this location as the default location in case of conflict

    When this option is checked, it makes this location the default location.

    Switch to this location when

    Contains a list of conditions that must be met before the client can switch to another location. You can:

    ·         Click Add to add more conditions.

    ·         Click Edit to modify a selected condition in the list.

    ·         Click Delete to remove a selected condition in the list.

    ·         Click Move Up or Move Down to change the order of conditions. The client checks the conditions in the list until it finds one that meets the criteria for switching to a new location.

    DNS Query Loop in

    When this option is checked and the number of seconds specified, queries the DNS server at the specified interval.

    ICMP Request Loop in

    When this option is checked and the number of seconds specified, checks for ICMP ping requests at the specified interval.

    The location will be checked every

    The time interval after which the location is checked.

    Enable location change notification

    When this option is checked, it enables an email notification when a location change occurs.

    Notification message

    Type any additional text for the email notification.

    Note:

    The last three options appear if you lick Manage Locations under Tasks on the Policies tab of the Clients page.

    Hope that helps!!



  • 4.  RE: Location check every 4 seconds

    Posted Jun 04, 2014 03:04 PM

    Brian.........

    .I do have the management server as the only condition.(Client computer does not connect to management server) My thinking was if the client isn't on my network it won't be able to connect to the SEPM and therefore will then change the location. Is this going to cause all clients to check my SEPM every four seconds or as you stated above, it shouldn't be an issue?



  • 5.  RE: Location check every 4 seconds

    Posted Jun 04, 2014 03:38 PM

    it would but it won't be able to connect to your SEPM so it will stay in the external location. I've never seen an issue with this setting, especially with the low client count that you have.



  • 6.  RE: Location check every 4 seconds

    Posted Jun 05, 2014 12:29 AM

    There are few more checks before it switches the location, check this document

    Location Awareness Logic

    http://www.symantec.com/business/support/index?page=content&id=TECH97097